$ rpki-client -vvf repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft File: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft (raw, json) Hash identifier: aGTE5g3VV1Giu5meOk+8nFQygcDAPxkYQLGoE9WhBbM= Subject key identifier: 65:8C:51:4B:0D:BE:53:B2:06:B3:0D:45:45:74:A4:97:B7:48:C4:52 Authority key identifier: FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD Certificate issuer: /CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Certificate serial: 35E67C125B1D9084CAD706DAD397B929A5F75B78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft Manifest number: 012C Signing time: Mon 03 Nov 2025 02:11:16 +0000 Manifest this update: Mon 03 Nov 2025 02:06:16 +0000 Manifest next update: Thu 06 Nov 2025 11:55:16 +0000 Files and hashes: 1: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: c2NPfXxSOck24WuWyT1N3C7BCQbBB0F0oXAud+7dRiM=) 2: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl (hash: SpEovqWSmeF5lM7PI6WDJHeTQD+MSFwnHiqmnKzQcbo=) 3: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: qufNb3/LUFwbrIvm8YtRzGBfloSV6jK/5s6hJyz0aXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e6:7c:12:5b:1d:90:84:ca:d7:06:da:d3:97:b9:29:a5:f7:5b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Validity Not Before: Nov 3 02:06:16 2025 GMT Not After : Nov 6 11:55:16 2025 GMT Subject: CN=658C514B0DBE53B206B30D454574A497B748C452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:90:65:c1:70:71:83:aa:e1:76:5e:6d:7e: 2d:1c:09:4b:92:18:a0:11:33:a4:53:77:7e:ce:d1: 0a:aa:3c:a1:68:64:76:2f:ab:bf:34:a8:61:2d:a8: bf:ca:d3:59:84:8e:00:06:50:2b:ea:0c:0c:56:e6: 1e:b6:0b:1c:c6:59:90:6c:df:80:b0:8f:c2:79:8a: 11:11:e7:de:fe:38:6b:df:cc:b6:26:91:be:58:7e: 54:37:c4:ab:94:cd:fa:b6:ab:58:af:45:e7:5c:6d: 67:8e:06:5f:55:2b:16:d6:85:3e:14:83:11:31:6b: 4b:ea:04:69:8c:d5:ff:a9:a2:be:ee:5d:ab:68:a0: de:18:02:b6:b1:09:07:52:26:bc:eb:8f:7d:bd:a4: b3:de:0c:fe:07:c6:06:24:64:bf:a9:63:72:72:6d: 10:d3:0c:0a:ad:b6:e3:b0:7a:1b:62:5d:f7:d3:ee: 37:44:35:c9:43:c0:31:55:f5:c2:f7:c3:08:4b:68: d0:59:fe:4e:63:98:db:59:bd:d5:c2:e4:97:4d:bf: a0:a5:fa:2f:3d:9c:8b:ce:d1:a3:64:d5:26:c5:89: 3b:a2:e4:8e:7c:5a:fd:2d:0e:ff:4f:fe:37:c2:a1: 25:86:0f:fc:dc:29:e5:78:0f:67:4d:24:11:ff:e6: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8C:51:4B:0D:BE:53:B2:06:B3:0D:45:45:74:A4:97:B7:48:C4:52 X509v3 Authority Key Identifier: keyid:FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6a:5e:27:08:be:a9:35:58:77:cf:4e:81:4e:c9:f7:f1:d4: bd:2e:da:a9:7b:3f:c9:78:9f:00:d1:f5:e8:ae:0b:11:13:33: 6e:23:c9:e1:3c:f1:d4:17:05:cb:fb:dc:fc:38:27:2f:ed:8d: 6c:ca:bb:46:4d:88:ef:23:2d:01:ed:83:46:2d:77:b7:e2:f7: b3:70:e8:98:ba:7a:1f:b5:1b:02:8a:45:6a:8e:1b:d9:dc:9b: 12:97:17:23:5d:00:db:46:7f:8b:dd:c7:cd:ee:60:b1:c6:b9: df:a5:50:e9:b3:86:22:bb:2c:9b:bd:d4:ca:2c:b6:d8:bb:6e: e6:22:09:8d:b3:3d:4f:26:55:1b:a8:03:d6:09:70:75:f8:f5: 3a:2e:6f:80:32:a3:8f:a2:b6:7d:62:5d:65:d8:75:2d:46:2f: 24:2f:e2:3e:e5:ae:d6:77:48:8f:e7:31:df:0b:44:7c:bb:90: 7b:2d:33:d9:9a:31:0f:e2:b3:84:e3:6e:65:1a:b7:ea:1f:a2: 99:55:b9:d9:1b:57:f0:d7:da:79:6a:3f:ec:e2:33:83:de:7d: bc:29:fe:b6:c2:92:17:0c:1e:a4:02:94:54:0f:47:ff:ff:81: 4d:43:4d:ec:ee:3c:58:1e:c5:f3:64:23:99:c4:af:e3:58:3c: 69:ed:f5:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNeZ8ElsdkITK1wba05e5KaX3W3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1 N0QwMThDRDAeFw0yNTExMDMwMjA2MTZaFw0yNTExMDYxMTU1MTZaMDMxMTAvBgNV BAMTKDY1OEM1MTRCMERCRTUzQjIwNkIzMEQ0NTQ1NzRBNDk3Qjc0OEM0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QpBlwXBxg6rhdl5tfi0cCUuS GKARM6RTd37O0QqqPKFoZHYvq780qGEtqL/K01mEjgAGUCvqDAxW5h62CxzGWZBs 34Cwj8J5ihER597+OGvfzLYmkb5YflQ3xKuUzfq2q1ivRedcbWeOBl9VKxbWhT4U gxExa0vqBGmM1f+por7uXatooN4YAraxCQdSJrzrj329pLPeDP4HxgYkZL+pY3Jy bRDTDAqttuOwehtiXffT7jdENclDwDFV9cL3wwhLaNBZ/k5jmNtZvdXC5JdNv6Cl +i89nIvO0aNk1SbFiTui5I58Wv0tDv9P/jfCoSWGD/zcKeV4D2dNJBH/5n2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZYxRSw2+U7IGsw1FRXSkl7dIxFIwHwYDVR0j BBgwFoAU+l9syZusgp1N577O6CMZllfQGM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmYxZWI0Yi00OGRjLTRlZWEtOTE4MS0xMjhjYjI4YjNkYmEvMC9GQTVGNkNDOTlC QUM4MjlENERFN0JFQ0VFODIzMTk5NjU3RDAxOENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1N0Qw MThDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5 OTY1N0QwMThDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxqXicIvqk1WHfPToFOyffx1L0u2ql7P8l4 nwDR9eiuCxETM24jyeE88dQXBcv73Pw4Jy/tjWzKu0ZNiO8jLQHtg0Ytd7fi97Nw 6Ji6eh+1GwKKRWqOG9ncmxKXFyNdANtGf4vdx83uYLHGud+lUOmzhiK7LJu91Mos tti7buYiCY2zPU8mVRuoA9YJcHX49Toub4Ayo4+itn1iXWXYdS1GLyQv4j7lrtZ3 SI/nMd8LRHy7kHstM9maMQ/is4TjbmUat+ofoplVudkbV/DX2nlqP+ziM4Pefbwp /rbCkhcMHqQClFQPR///gU1DTezuPFgexfNkI5nEr+NYPGnt9d4= -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:23 2025 by rpki-client